OWASP ASVS Level 2

Security audit
in one command

Pre-scan your app for CASA Tier 2 compliance. Fix issues before the assessor arrives.

Install

$ git clone https://github.com/acoyfellow/vet && cd vet
$ bun install && bun build src/cli.ts --compile --outfile vet
$ ./vet https://your-app.com

Try it live

Runs a lightweight scan from the edge — headers, methods, CORS, error disclosure.

V9.1

HSTS, CSP, X-Frame-Options, Permissions-Policy, and more.

V9.3

Certificate validation, TLS 1.2+ enforcement, mixed content.

V9.2

TRACE/TRACK blocked, proper 405 responses.

No stack traces, no version strings, no internal paths.

V9.4

No wildcard on credentialed routes, no origin reflection.

SQL injection, XSS, path traversal, malformed payloads.